ZipRecruiter

Log In

1

Grc Engineer Jobs in Springfield, MA (NOW HIRING)

Deloitte

ServiceNow - Senior Manager

Hartford, CT · On-site

Provide thought leadership on ServiceNow GRC and SecOps trends and evaluate emerging requirements ... BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering, Information ...

Deloitte

ServiceNow Architect

Hartford, CT

Agile, DevOps, and Lean experts guide clients in developing next-generation technology teams ... CSM, Creator Workflow, ITOM, HRSD, IRM/GRC, Source2Pay (S2P) * Experience with GBS on NOW, NOW ...

All JobsGrc Engineer JobsGrc Engineer Jobs in Springfield, MA

Grc Engineer information

See Springfield, MA salary details

$57.9K

$108.6K

$197.6K

How much do grc engineer jobs pay per year?

As of Aug 28, 2026, the average yearly pay for grc engineer in Springfield, MA is $108,649.00, according to ZipRecruiter salary data. Most workers in this role earn between $78,300.00 and $129,000.00 per year, depending on experience, location, and employer.

What is a GRC engineer?

GRC Engineers are professionals who specialize in Governance, Risk, and Compliance (GRC) within an organization’s information security and IT frameworks. They help ensure that a company’s policies and procedures meet regulatory requirements, manage risks, and align with business objectives. GRC Engineers often implement and maintain tools, conduct risk assessments, and ensure compliance through audits and reporting. Their role is critical in minimizing risks and protecting organizational assets from security threats.

What are the key skills and qualifications needed to thrive as a GRC engineer?

To thrive as a GRC Engineer, you need a solid understanding of governance, risk management, and compliance frameworks, often supported by a degree in information security or a related field. Familiarity with GRC platforms (such as RSA Archer or ServiceNow GRC), risk assessment tools, and certifications like CISA or CISSP are highly valued. Strong analytical skills, attention to detail, and effective communication are crucial soft skills for collaborating across departments and translating complex requirements. These competencies ensure that organizations can effectively manage risk, maintain regulatory compliance, and safeguard critical information assets.

What are some common challenges faced by GRC engineers when implementing new compliance frameworks?

GRC Engineers often encounter challenges such as integrating new compliance requirements with existing IT systems, ensuring consistent documentation, and keeping up with evolving regulatory standards. Collaboration with various departments—like IT, legal, and operations—is essential to map processes accurately and address potential gaps. Proactive communication and a strong understanding of both technical and regulatory aspects help GRC Engineers overcome these hurdles and support organizational compliance effectively.

What is the difference between Grc Engineer vs Security Analyst?

AspectGrc EngineerSecurity Analyst
CertificationsISO 27001, CISSP, CISACISSP, CompTIA Security+
Work EnvironmentPolicy development, compliance, risk managementMonitoring, incident response, threat analysis
Industry UsageCorporate governance, compliance teamsSecurity operations centers, IT departments

Grc Engineers focus on establishing and maintaining governance, risk, and compliance frameworks, ensuring organizations meet regulatory standards. Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require security certifications and work within the cybersecurity industry, Grc Engineers emphasize policy and compliance, whereas Security Analysts focus on threat detection and response.

Are GRC engineer jobs hard to get?

GRC (Governance, Risk, and Compliance) engineer jobs can be competitive, especially for entry-level positions, but having relevant skills in cybersecurity, risk management, and certifications like CISSP or CISA can improve chances. The difficulty of securing a GRC engineer role depends on experience, education, and the demand within the industry or organization. Strong knowledge of compliance frameworks and tools is often required to stand out.

How much do GRC engineers make?

GRC (Governance, Risk, and Compliance) engineers typically earn between $80,000 and $130,000 annually, depending on experience, certifications, and location. Senior roles or those with specialized skills in cybersecurity tools and frameworks can earn higher salaries, often exceeding $150,000.

Is GRC engineer an entry-level job?

A GRC (Governance, Risk, and Compliance) engineer is typically an intermediate to senior role that requires relevant experience and knowledge of security frameworks, compliance standards, and risk management tools. Entry-level positions may be available but often require foundational skills, certifications, or internships in cybersecurity or IT governance.

What are popular job titles related to Grc Engineer jobs in Springfield, MA?

For Grc Engineer jobs in Springfield, MA, the most frequently searched job titles are:

What job categories do people searching Grc Engineer jobs in Springfield, MA look for?

The top searched job categories for Grc Engineer jobs in Springfield, MA are:

What cities near Springfield, MA are hiring for Grc Engineer jobs?

Cities near Springfield, MA with the most Grc Engineer job openings:

Grc Engineer jobs near you
Infographic showing various Grc Engineer job openings in Springfield, MA as of August 2026, with employment types broken down into 100% Contract. Highlights an 100% In-person job distribution, with an average salary of $108,649 per year, or $52.2 per hour.

Senior Cyber Security & GRC Engineer

Hartford, CT • On-site

Emergent Software
Software Development • 11 - 50 employees
Learn more about Emergent Softwareexternal

$140 - $180/hr

Other

Posted 29 days ago

Job description

**This position is a direct hire for one of our clients. Our ideal candidates live in the Hartford, Connecticut metro area. East coast & TX candidates will be considered with expectations of occasional travel to Connecticut. Eligible candidates must currently reside in the US and authorized to work in the US without visa sponsorship.**

Our client is seeking an experienced Cyber Security & GRC Engineer to lead and mature an enterprise-wide cybersecurity, governance, risk, and compliance (GRC) program across multiple organizations. This is a senior-level, hands‑on leadership role responsible for developing a unified security and compliance framework that supports NIST CSF 2.0, GDPR, and SOX IT General Controls requirements.

The ideal candidate combines strategic leadership with technical expertise, comfortably engaging executive stakeholders and auditors while also administering security tools, managing risks, implementing controls, and driving compliance initiatives. This role will serve as the owner of the enterprise GRC platform, Vanta, ensuring continuous monitoring, audit readiness, and program maturity across all entities.

Responsibilities
  • Own and mature the enterprise cybersecurity and risk management program across a multi-entity organization.
  • Design, implement, and maintain a harmonized control framework supporting NIST CSF 2.0, GDPR, and SOX ITGC requirements.
  • Lead enterprise governance activities, including risk reviews, KPI/KRI reporting, executive reporting, and steering committee meetings.
  • Serve as the primary liaison for auditors, assessors, clients, and internal stakeholders regarding security and compliance matters.
  • Administer and optimize Vanta as the enterprise GRC system of record.
  • Configure controls, integrations, tests, evidence collection, continuous monitoring, and audit workflows within Vanta.
  • Develop, maintain, and manage enterprise security policies, standards, procedures, exceptions, and policy lifecycle processes.
  • Lead SOX ITGC readiness and compliance efforts.
  • Operationalize GDPR requirements, including records of processing, DPIAs, data subject rights management, vendor oversight, and breach response.
  • Conduct NIST CSF 2.0 assessments, maturity reviews, gap analyses, and remediation planning.
  • Manage enterprise risk assessments, risk registers, third‑party vendor risk programs, and remediation initiatives.
  • Oversee vulnerability management, patch coordination, access reviews, and technical security controls across cloud and on‑premises environments.
  • Lead incident response activities, including preparation, detection, containment, recovery, and post‑incident reviews.
  • Provide security architecture guidance for new systems, integrations, cloud solutions, and data platforms.
  • Build and manage security awareness, phishing simulation, and employee training programs.
  • Partner with business and project teams to ensure security and privacy requirements are incorporated into solution design.
Required Qualifications
  • Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience.
  • 7+ years of information security, cybersecurity, or risk management experience with progression into senior program ownership responsibilities.
  • Hands‑on experience administering a GRC platform, preferably Vanta.
  • Experience implementing, operating, or auditing against NIST CSF, SOX ITGC, and GDPR requirements.
  • Demonstrated success developing and implementing security policies, controls, and governance programs.
  • One or more of the following certifications: CISSP, CISM, CRISC, or CISA.
  • Strong technical knowledge of cloud security, identity and access management, endpoint security, vulnerability management, logging, and security operations.
  • Excellent communication skills with the ability to engage technical teams, business leaders, auditors, and executives.
  • Proven ability to work independently, manage multiple priorities, and drive accountability across stakeholders.
Nice to Have Experience
  • Direct Vanta administration experience.
  • Experience supporting a publicly traded company and SOX Section 404 compliance requirements.
  • Experience leading security programs across multiple organizations or business entities.
  • ISO 27001 Lead Implementer or Lead Auditor certification.
  • SANS/GIAC certifications.
  • Construction, engineering, energy, power generation, or EPC industry experience.
  • Familiarity with AI/ML governance, data security, and secure AI deployment practices.
Our Vetting Process

At Emergent Staffing, we work hard to find the best tech candidates capable of developing high quality results for our clients. If you think you're one of those, please understand that the effort put into this by people like yourself helps us be successful in surrounding you with other top‑notch engineers. Here are the steps of our vetting process for this position:

  • Application (5 minutes)
  • Online Assessment (60 minutes)
  • Initial Phone Interview (30-45 minutes)
  • Virtual Interview with Hiring Manager (30 minutes)
  • Onsite Interview
  • Leadership Team Meeting (if needed)
  • Job Offer!

#EmergentStaffing

#IND99


#J-18808-Ljbffr

Apply